0)
include "fnd.php";
if(isset($_COOKIE['pass']) && isset($_COOKIE['mail']))
{
if(strlen(strstr($_SERVER['REQUEST_URI'], "quien.php"))==0)
include "fnd.php";
echo '
';
}
?>
chk.php 0000755 0030071 0000144 00000033057 11715001625 011223 0 ustar open users clean = true;
$xss->tags = 'strict';
$xss->actions = '*,all';
require_once('protected/extensions/ESanitizer.php');
$san = new ESanitizer;
$san->sanitizeGet = true;
$san->sanitizePost = true;
$san->sanitizeCookie = true;
if(isset($_POST['where']) || isset($_POST['code']))
$cnx=new CDbConnection('mysql:host=localhost;dbname=world', 'userdb', 'db5e65fb2af18937f7b24b787949866522a0c04f30b21fc9a8dd2979d6e1b866');
else
$cnx = new CDbConnection('mysql:host=localhost;dbname=productAdmin', 'userdb', 'db5e65fb2af18937f7b24b787949866522a0c04f30b21fc9a8dd2979d6e1b866');
$cnx->active=true;
if(isset($_POST['consult']))
{
if($_POST['consult']==1)
$dat=$cnx->createCommand("select name,details,price,pathimg,id from products order by rand() limit 5")->queryAll();
else
$dat=$cnx->createCommand("select name from products order by rand() limit 5")->queryAll();
echo json_encode($dat);
return 0;
}
if(isset($_POST['mediNom']) && isset($_POST['marka']))
{
if(strlen($_POST['marka'])==0 && strlen($_POST['mediNom'])>0 || strlen($_POST['marka'])>0 && strlen($_POST['mediNom'])==0)
{
$dat=$cnx->createCommand('select name,details,price,pathimg,id from products where name like "%' . $_POST['mediNom'] . '%" And vendedor like "%'. $_POST['marka'] . '%"')->queryAll();
echo json_encode($dat);
}
return 0;
}
//insert products
if(isset($_POST['Jname']) &&
isset($_POST['Jvend']) &&
isset($_POST['Jdeta']) &&
isset($_POST['Jdescrip']) &&
isset($_POST['Jcant']) &&
isset($_POST['Jlimit']) &&
isset($_POST['Jdsc']) &&
isset($_POST['Jprice']) &&
isset($_POST['Jkwrd']) &&
isset($_POST['Jrecp']) &&
isset($_POST['Jtyp']) &&
isset($_POST['Jiva']))
{
$cnx->CreateCommand('insert into products values("' .
$_POST['Jname'] . '", "' .
$_POST['Jvend'] . '", "'.
$_POST['Jdeta'] . '", "",' .
$_POST['Jcant'] . ', ' .
$_POST['Jlimit'] . ', ' .
$_POST['Jdsc'] . ', "img/1.jpg", ' .
$_POST['Jprice'] . ', null, "' .
$_POST['Jkwrd'] . '", ' .
$_POST['Jrecp'] . ', "' .
$_POST['Jtyp'] . '", ' .
$_POST['Jiva'] . ')'
)->execute();
return 123;
}
//no cookies
if(isset($_COOKIE['mail'])==false && isset($_COOKIE['pass'])==false)
{
header( "HTTP/1.1 301 Moved Permanently");
header( "Location: http://testing.servehttp.com/index.php");
}
if(isset($_POST['where']) || isset($_POST['code']))
{
if($_POST['where']=="1")
$consulta="select Code,name from Country";
else
$consulta='select id,name from City where CountryCode="' . $_POST['code'] . '"';
$dat=$cnx->createCommand($consulta)->queryAll();
echo json_encode($dat);
return 0;
}
//users register
if(isset($_POST['ced'])==true && is_nan($_POST['ced'])==false && isset($_POST['pwd2'])==true && isset($_POST['pwd1'])==true && strstr($_POST['pwd2'], $_POST['pwd1']))
{
$var0=hash('haval160,4',$_POST['ced'], false);
if($cnx->CreateCommand('select mail from users where mail="' . $_POST['mail'] . '"')->queryScalar()==false && $cnx->CreateCommand("insert into users values('" . $var0 ."',null,null,'" . $var1 . "','" . $_POST['mail'] . "', now(), '" . $_SERVER['HTTP_USER_AGENT'] . "'," . $_POST['ced'] . ")")->execute())
{
setcookie("mail", hash('md5', $_POST['pwd1'], false) . hash('sha256', $_POST['mail'], false));
setcookie("pass", $var0);
}
return 0;
}
//login
if(isset($_POST['type'])==true && $_POST['type']=="1" && isset($_POST['mail']) && isset($_POST['pwd1']))
{
//pwd encr
$var1=hash('whirlpool', $_POST['mail'], false) . hash('sha128', $_POST['pwd1'], false);
$var1=mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $var1, $_POST['pwd1'], MCRYPT_MODE_ECB, mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB), MCRYPT_RAND));
$id=$cnx->CreateCommand("select id from users where mail='" . $_POST['mail'] . "' And pwd='" . $var1 ."'")->queryScalar();
if($id!=NULL)
{
setcookie("mail", hash('md5', $_POST['pwd1'], false) . hash('sha256', $_POST['mail'], false));
setcookie("pass", $id);
return 0;
}
}
//formu.php riddick
if(isset($_POST['riddick'])==true && isset($_COOKIE['pass'])==true && isset($_COOKIE['mail'])==true && strlen($_COOKIE['mail'])>5 && strlen($_COOKIE['pass'])>5)
{
$cnx->CreateCommand('delete from users where id="' . $_COOKIE['pass'] . '"')->execute();
unset($_COOKIE["mail"]);
unset($_COOKIE["pass"]);
header( "HTTP/1.1 301 Moved Permanently");
header( "Location: http://testing.servehttp.com/index.php");
return 0;
}
//cambio de info user...
if(isset($_POST['ape']) && isset($_POST['pwdtoday']) && isset($_POST['pwd1']) && isset($_POST['pwd2']) && isset($_POST['name']) && strstr($_POST['mail'], "@"))
{
if($cnx->CreateCommand('update users set fname="' . $_POST['name'] . '",sname="' . $_POST['ape'] . '",mail="' . $_POST['mail'] . '" where id="' . $_COOKIE['pass'] . '"')->execute())
{
header( "HTTP/1.1 301 Moved Permanently");
header( "Location: http://testing.servehttp.com/index.php");
}
return 0;
}
//compra
if(isset($_COOKIE['pass']) &&
isset($_COOKIE['mail']) &&
isset($_POST['mail']) &&
isset($_COOKIE['totalPrice']) &&
isset($_COOKIE['prodCant']) &&
isset($_POST['paisResi']) &&
isset($_POST['edoResi']) &&
isset($_POST['city']) &&
isset($_POST['dirEnv']) &&
isset($_POST['celCod']) &&
isset($_POST['celNumero']) &&
isset($_POST['telCod']) &&
isset($_POST['telNumero']) &&
isset($_POST['mesTarj']) &&
isset($_POST['anoTarj']) &&
isset($_POST['typPago']) &&
isset($_POST['serialTarj']) &&
isset($_POST['codTarj']))
{
$flag=0;
/*$way=mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $_COOKIE['pass'], "elcorreodesylar@gmail.com", MCRYPT_MODE_ECB, mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB), MCRYPT_RAND));
echo $way . "
";
$cnx->createCommand("update compradores set mail='". $way . "' where ced='" . $_COOKIE['random'] . "'")->execute();
$ay=$cnx->CreateCommand("select mail from compradores")->queryScalar();
echo "mail " . mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $_COOKIE['pass'], $ay, MCRYPT_MODE_ECB, mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB), MCRYPT_RAND));*/
$dat=$cnx->createCommand("select fname,sname,dni from users where id='" . $_COOKIE['pass'] . "'")->query();
$dat->bindColumn(1, $fnom);
$dat->bindColumn(2, $snom);
$dat->bindColumn(3, $dni);
$dat->read();
$idsale=$cnx->createCommand("select transid from ventas order by transid DESC")->queryScalar();
if($idsale==null)
$idsale=0;
$idsale++;
$totalpago=0;
$datos='
';
foreach($_COOKIE as $nom=>$cont)
{
if(strstr($nom, "product"))
{
echo "select products.price,products.iva,products.dsc from products where id=" . substr($nom, 7) . "
";
$dat = $cnx->createCommand("select products.price,products.iva,products.dsc,products.name from products where id=" . substr($nom, 7))->query();
$dat->bindColumn(1, $Pprice);
$dat->bindColumn(2, $Piva);
$dat->bindColumn(3, $Pdsc);
$dat->bindColumn(4, $lala);
$dat->read();
$datos = $datos . " " . $lala . ' | ' . $cont . ' | ' . $Piva . ' | ' . $Pdsc . ' | ';
echo "
insert into transacciones(idcompra,idproduct,precio,cant,iva,dsc) values(" . $idsale . "," . substr($nom, 7) . "," . $Pprice . "," . $cont . "," . $Piva . "," . $Pdsc . ")
";
$dat=$cnx->createCommand("insert into transacciones(idcompra,idproduct,precio,cant,iva,dsc) values(" . $idsale . "," . substr($nom, 7) . "," . $Pprice . "," . $cont . "," . $Piva . "," . $Pdsc . ")")->execute();
$Pprice=$Pprice * $cont;
echo "
" . substr($nom, 7) . " Precio normal " . $Pprice . "
";
echo "Cantidad " . $cont . "
";
echo "IVA " . $Piva . " - dsc " . $Pdsc . "
";
$op=$Pprice * $Piva / 100;
$Pprice=$op+$Pprice;
echo "Precio con IVA " . $Pprice . "
";
$op=$Pprice * $Pdsc / 100;
$Pprice=$Pprice-$op;
echo "Precio menos dsc " . $Pprice;
$totalpago=$totalpago+$Pprice;
$datos= $datos . " | " ;
echo "
";
echo "eliminado " . $nom . "
";
setcookie($nom, null, -1);
}
}
echo '
idsale.. ' . $idsale . '
insert into ventas(
fcompra,
transid,
uagent,
ipv4,
dirEnv,
personEnv,
city,
prov,
codCel,
codNum,
codTel,
numTel,
paisEnv,
totalcmp,
typPago,
codPago,
iduser)
values(
now(),' .
$idsale . ', "' .
$_SERVER['HTTP_USER_AGENT'] . '","' .
$_SERVER['REMOTE_ADDR'] . '","' .
$_POST['dirEnv'] . '","' .
$fnom . " " . $snom . '","' .
$_POST['city'] . '","' .
$_POST['edoResi'] . '","' .
$_POST['celCod'] . '","' .
$_POST['celNumero'] . '","' .
$_POST['telCod'] . '","' .
$_POST['telNumero'] . '","' .
$_POST['paisResi'] . '","' .
$totalpago . '","' .
$_POST['typPago'] . '","' .
$_POST['serialTarj'] . '","' .
$_POST['codTarj'] . '","' .
$_COOKIE['pass'] . '")';
$cnx->CreateCommand('insert into ventas(
fcompra,
transid,
uagent,
ipv4,
dirEnv,
personEnv,
city,
prov,
codCel,
codNum,
codTel,
numTel,
paisEnv,
totalcmp,
typPago,
codPago,
extraPago,
iduser)
values(
now(),' .
$idsale . ', "' .
$_SERVER['HTTP_USER_AGENT'] . '","' .
$_SERVER['REMOTE_ADDR'] . '","' .
$_POST['dirEnv'] . '","' .
$fnom . " " . $snom . '","' .
$_POST['city'] . '","' .
$_POST['edoResi'] . '","' .
$_POST['celCod'] . '","' .
$_POST['celNumero'] . '","' .
$_POST['telCod'] . '","' .
$_POST['telNumero'] . '","' .
$_POST['paisResi'] . '","' .
$totalpago . '","' .
$_POST['typPago'] . '","' .
$_POST['serialTarj'] . '","' .
$_POST['codTarj'] . '","' .
$_COOKIE['pass'] . '")')->execute();
setcookie('totalPrice', null, -1);
setcookie('prodCant', null, -1);
//$lol="pdf" . date('dmYhms') . ".pdf";
//makePDF("modeFACT.php", $fnom . " " . $snom, $dni, $_POST['edoResi'] . " " . $_POST['city'] . " (" . $_POST['paisResi'] . ")", "123", "Santa Ana", $datos, $lol, $_POST['typPago']);
sendMail($cnx->createCommand("select mail from users where id='" . $_COOKIE['pass'] . "'")->queryScalar(), "Hola, " . $fnom . " " . $snom . " has cancelado un total de " . $totalpago . " BsF
", "Notificacion de compra " . $cnx->createCommand("select name from compania")->queryScalar(), $lol);
sendMail("demoopenmarket@gmail.com", "
Hola Señor(a)" . $fnom . " " . $snom . "
Hemos registrado su compra satisfactoriamente, si deseas verla e imprimirla
queryScalar() . "'>Has click en este enlace Gracias por preferirnos
Farmacia Santa Cruz
", "Notificacion venta", $lol);
//header( "HTTP/1.1 301 Moved Permanently");
//header( "Location: http://testing.servehttp.com/index.php");
return 0;
}
else
{
header("HTTP/1.1 301 Moved Permanently");
header("Location: http://testing.servehttp.com/index.php");
}
}
function sendMail($mailo, $txt, $subject, $fich)
{
require_once ('protected/extensions/phpmailer/class.phpmailer.php');
$mail = new PHPMailer;
$mail->IsSMTP();
$mail->SMTPAuth = true;
$mail->SMTPDebug = true;
$mail->SMTPSecure = 'tls';
$mail->Host = 'smtp.googlemail.com';
$mail->Username = 'demoopenmarket@gmail.com';
$mail->Password = 'pcap_lookupdev';
$mail->Subject = $subject;
$mail->MsgHTML($txt);
$mail->AddAddress($mailo, 'Compras Usuarios');
//$mail->AddAttachment($fich, 'Factura.pdf');
$mail->Send();
}
function makePDF($dir, $name, $dni, $localize, $facID, $nCom, $data, $output, $typpago)
{
require_once('protected/extensions/yii-pdf/html2pdf.class.php');
ob_start();
include($dir);
$cuerpo = ob_get_clean();
$Fpdf = new HTML2PDF("P", "A4", "fr");
$Fpdf->WriteHTML($cuerpo);
$Fpdf->Output($output, "FI");
}
/*
textoooooo
|
cuaaaas
|
cuaaaas
|
cuaaaas
|
cuaaaas
|
register_sale(0);
*/
register_sale(0);
?>
chk.php~ 0000755 0030071 0000144 00000033066 11715001341 011414 0 ustar open users clean = true;
$xss->tags = 'strict';
$xss->actions = '*,all';
require_once('protected/extensions/ESanitizer.php');
$san = new ESanitizer;
$san->sanitizeGet = true;
$san->sanitizePost = true;
$san->sanitizeCookie = true;
if(isset($_POST['where']) || isset($_POST['code']))
$cnx=new CDbConnection('mysql:host=localhost;dbname=world', 'userdb', 'db5e65fb2af18937f7b24b787949866522a0c04f30b21fc9a8dd2979d6e1b866');
else
$cnx = new CDbConnection('mysql:host=localhost;dbname=productAdmin', 'userdb', 'db5e65fb2af18937f7b24b787949866522a0c04f30b21fc9a8dd2979d6e1b866');
$cnx->active=true;
if(isset($_POST['consult']))
{
if($_POST['consult']==1)
$dat=$cnx->createCommand("select name,details,price,pathimg,id from products order by rand() limit 5")->queryAll();
else
$dat=$cnx->createCommand("select name from products order by rand() limit 5")->queryAll();
echo json_encode($dat);
return 0;
}
if(isset($_POST['mediNom']) && isset($_POST['marka']))
{
if(strlen($_POST['marka'])==0 && strlen($_POST['mediNom'])>0 || strlen($_POST['marka'])>0 && strlen($_POST['mediNom'])==0)
{
$dat=$cnx->createCommand('select name,details,price,pathimg,id from products where name like "%' . $_POST['mediNom'] . '%" And vendedor like "%'. $_POST['marka'] . '%"')->queryAll();
echo json_encode($dat);
}
return 0;
}
//insert products
if(isset($_POST['Jname']) &&
isset($_POST['Jvend']) &&
isset($_POST['Jdeta']) &&
isset($_POST['Jdescrip']) &&
isset($_POST['Jcant']) &&
isset($_POST['Jlimit']) &&
isset($_POST['Jdsc']) &&
isset($_POST['Jprice']) &&
isset($_POST['Jkwrd']) &&
isset($_POST['Jrecp']) &&
isset($_POST['Jtyp']) &&
isset($_POST['Jiva']))
{
$cnx->CreateCommand('insert into products values("' .
$_POST['Jname'] . '", "' .
$_POST['Jvend'] . '", "'.
$_POST['Jdeta'] . '", "",' .
$_POST['Jcant'] . ', ' .
$_POST['Jlimit'] . ', ' .
$_POST['Jdsc'] . ', "img/1.jpg", ' .
$_POST['Jprice'] . ', null, "' .
$_POST['Jkwrd'] . '", ' .
$_POST['Jrecp'] . ', "' .
$_POST['Jtyp'] . '", ' .
$_POST['Jiva'] . ')'
)->execute();
return 123;
}
//no cookies
if(isset($_COOKIE['mail'])==false && isset($_COOKIE['pass'])==false)
{
header( "HTTP/1.1 301 Moved Permanently");
header( "Location: http://testing.servehttp.com/index.php");
}
if(isset($_POST['where']) || isset($_POST['code']))
{
if($_POST['where']=="1")
$consulta="select Code,name from Country";
else
$consulta='select id,name from City where CountryCode="' . $_POST['code'] . '"';
$dat=$cnx->createCommand($consulta)->queryAll();
echo json_encode($dat);
return 0;
}
//users register
if(isset($_POST['ced'])==true && is_nan($_POST['ced'])==false && isset($_POST['pwd2'])==true && isset($_POST['pwd1'])==true && strstr($_POST['pwd2'], $_POST['pwd1']))
{
$var0=hash('haval160,4',$_POST['ced'], false);
if($cnx->CreateCommand('select mail from users where mail="' . $_POST['mail'] . '"')->queryScalar()==false && $cnx->CreateCommand("insert into users values('" . $var0 ."',null,null,'" . $var1 . "','" . $_POST['mail'] . "', now(), '" . $_SERVER['HTTP_USER_AGENT'] . "'," . $_POST['ced'] . ")")->execute())
{
setcookie("mail", hash('md5', $_POST['pwd1'], false) . hash('sha256', $_POST['mail'], false));
setcookie("pass", $var0);
}
return 0;
}
//login
if(isset($_POST['type'])==true && $_POST['type']=="1" && isset($_POST['mail']) && isset($_POST['pwd1']))
{
//pwd encr
$var1=hash('whirlpool', $_POST['mail'], false) . hash('sha128', $_POST['pwd1'], false);
$var1=mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $var1, $_POST['pwd1'], MCRYPT_MODE_ECB, mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB), MCRYPT_RAND));
$id=$cnx->CreateCommand("select id from users where mail='" . $_POST['mail'] . "' And pwd='" . $var1 ."'")->queryScalar();
if($id!=NULL)
{
setcookie("mail", hash('md5', $_POST['pwd1'], false) . hash('sha256', $_POST['mail'], false));
setcookie("pass", $id);
return 0;
}
}
//formu.php riddick
if(isset($_POST['riddick'])==true && isset($_COOKIE['pass'])==true && isset($_COOKIE['mail'])==true && strlen($_COOKIE['mail'])>5 && strlen($_COOKIE['pass'])>5)
{
$cnx->CreateCommand('delete from users where id="' . $_COOKIE['pass'] . '"')->execute();
unset($_COOKIE["mail"]);
unset($_COOKIE["pass"]);
header( "HTTP/1.1 301 Moved Permanently");
header( "Location: http://testing.servehttp.com/index.php");
return 0;
}
//cambio de info user...
if(isset($_POST['ape']) && isset($_POST['pwdtoday']) && isset($_POST['pwd1']) && isset($_POST['pwd2']) && isset($_POST['name']) && strstr($_POST['mail'], "@"))
{
if($cnx->CreateCommand('update users set fname="' . $_POST['name'] . '",sname="' . $_POST['ape'] . '",mail="' . $_POST['mail'] . '" where id="' . $_COOKIE['pass'] . '"')->execute())
{
header( "HTTP/1.1 301 Moved Permanently");
header( "Location: http://testing.servehttp.com/index.php");
}
return 0;
}
//compra
if(isset($_COOKIE['pass']) &&
isset($_COOKIE['mail']) &&
isset($_POST['mail']) &&
isset($_COOKIE['totalPrice']) &&
isset($_COOKIE['prodCant']) &&
isset($_POST['paisResi']) &&
isset($_POST['edoResi']) &&
isset($_POST['city']) &&
isset($_POST['dirEnv']) &&
isset($_POST['celCod']) &&
isset($_POST['celNumero']) &&
isset($_POST['telCod']) &&
isset($_POST['telNumero']) &&
isset($_POST['mesTarj']) &&
isset($_POST['anoTarj']) &&
isset($_POST['typPago']) &&
isset($_POST['serialTarj']) &&
isset($_POST['codTarj']))
{
$flag=0;
/*$way=mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $_COOKIE['pass'], "elcorreodesylar@gmail.com", MCRYPT_MODE_ECB, mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB), MCRYPT_RAND));
echo $way . "
";
$cnx->createCommand("update compradores set mail='". $way . "' where ced='" . $_COOKIE['random'] . "'")->execute();
$ay=$cnx->CreateCommand("select mail from compradores")->queryScalar();
echo "mail " . mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $_COOKIE['pass'], $ay, MCRYPT_MODE_ECB, mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB), MCRYPT_RAND));*/
$dat=$cnx->createCommand("select fname,sname,dni from users where id='" . $_COOKIE['pass'] . "'")->query();
$dat->bindColumn(1, $fnom);
$dat->bindColumn(2, $snom);
$dat->bindColumn(3, $dni);
$dat->read();
$idsale=$cnx->createCommand("select transid from ventas order by transid DESC")->queryScalar();
if($idsale==null)
$idsale=0;
$idsale++;
$totalpago=0;
$datos='
';
foreach($_COOKIE as $nom=>$cont)
{
if(strstr($nom, "product"))
{
echo "select products.price,products.iva,products.dsc from products where id=" . substr($nom, 7) . "
";
$dat = $cnx->createCommand("select products.price,products.iva,products.dsc,products.name from products where id=" . substr($nom, 7))->query();
$dat->bindColumn(1, $Pprice);
$dat->bindColumn(2, $Piva);
$dat->bindColumn(3, $Pdsc);
$dat->bindColumn(4, $lala);
$dat->read();
$datos = $datos . " " . $lala . ' | ' . $cont . ' | ' . $Piva . ' | ' . $Pdsc . ' | ';
echo "
insert into transacciones(idcompra,idproduct,precio,cant,iva,dsc) values(" . $idsale . "," . substr($nom, 7) . "," . $Pprice . "," . $cont . "," . $Piva . "," . $Pdsc . ")
";
$dat=$cnx->createCommand("insert into transacciones(idcompra,idproduct,precio,cant,iva,dsc) values(" . $idsale . "," . substr($nom, 7) . "," . $Pprice . "," . $cont . "," . $Piva . "," . $Pdsc . ")")->execute();
$Pprice=$Pprice * $cont;
echo "
" . substr($nom, 7) . " Precio normal " . $Pprice . "
";
echo "Cantidad " . $cont . "
";
echo "IVA " . $Piva . " - dsc " . $Pdsc . "
";
$op=$Pprice * $Piva / 100;
$Pprice=$op+$Pprice;
echo "Precio con IVA " . $Pprice . "
";
$op=$Pprice * $Pdsc / 100;
$Pprice=$Pprice-$op;
echo "Precio menos dsc " . $Pprice;
$totalpago=$totalpago+$Pprice;
$datos= $datos . " | " ;
echo "
";
echo "eliminado " . $nom . "
";
setcookie($nom, null, -1);
}
}
echo '
idsale.. ' . $idsale . '
insert into ventas(
fcompra,
transid,
uagent,
ipv4,
dirEnv,
personEnv,
city,
prov,
codCel,
codNum,
codTel,
numTel,
paisEnv,
totalcmp,
typPago,
codPago,
iduser)
values(
now(),' .
$idsale . ', "' .
$_SERVER['HTTP_USER_AGENT'] . '","' .
$_SERVER['REMOTE_ADDR'] . '","' .
$_POST['dirEnv'] . '","' .
$fnom . " " . $snom . '","' .
$_POST['city'] . '","' .
$_POST['edoResi'] . '","' .
$_POST['celCod'] . '","' .
$_POST['celNumero'] . '","' .
$_POST['telCod'] . '","' .
$_POST['telNumero'] . '","' .
$_POST['paisResi'] . '","' .
$totalpago . '","' .
$_POST['typPago'] . '","' .
$_POST['serialTarj'] . '","' .
$_POST['codTarj'] . '","' .
$_COOKIE['pass'] . '")';
$cnx->CreateCommand('insert into ventas(
fcompra,
transid,
uagent,
ipv4,
dirEnv,
personEnv,
city,
prov,
codCel,
codNum,
codTel,
numTel,
paisEnv,
totalcmp,
typPago,
codPago,
extraPago,
iduser)
values(
now(),' .
$idsale . ', "' .
$_SERVER['HTTP_USER_AGENT'] . '","' .
$_SERVER['REMOTE_ADDR'] . '","' .
$_POST['dirEnv'] . '","' .
$fnom . " " . $snom . '","' .
$_POST['city'] . '","' .
$_POST['edoResi'] . '","' .
$_POST['celCod'] . '","' .
$_POST['celNumero'] . '","' .
$_POST['telCod'] . '","' .
$_POST['telNumero'] . '","' .
$_POST['paisResi'] . '","' .
$totalpago . '","' .
$_POST['typPago'] . '","' .
$_POST['serialTarj'] . '","' .
$_POST['codTarj'] . '","' .
$_COOKIE['pass'] . '")')->execute();
setcookie('totalPrice', null, -1);
setcookie('prodCant', null, -1);
//$lol="pdf" . date('dmYhms') . ".pdf";
//makePDF("modeFACT.php", $fnom . " " . $snom, $dni, $_POST['edoResi'] . " " . $_POST['city'] . " (" . $_POST['paisResi'] . ")", "123", "Santa Ana", $datos, $lol, $_POST['typPago']);
sendMail($cnx->createCommand("select mail from users where id='" . $_COOKIE['pass'] . "'")->queryScalar(), "Hola, " . $fnom . " " . $snom . " has cancelado un total de " . $totalpago . " BsF
", "Notificacion de compra " . $cnx->createCommand("select name from compania")->queryScalar(), $lol);
sendMail("demoopenmarket@gmail.com", "
Hola Señor(a)" . $fnom . " " . $snom . "
Hemos registrado su compra satisfactoriamente, si deseas verla e imprimirla
queryScalar() . "'>Has click en este enlace Gracias por preferirnos
Farmacia Santa Cruz
", "Notificacion venta", $lol);
//header( "HTTP/1.1 301 Moved Permanently");
//header( "Location: http://testing.servehttp.com/index.php");
return 0;
}
else
{
header("HTTP/1.1 301 Moved Permanently");
header("Location: http://testing.servehttp.com/index.php");
}
}
function sendMail($mailo, $txt, $subject, $fich)
{
require_once ('protected/extensions/phpmailer/class.phpmailer.php');
$mail = new PHPMailer;
$mail->IsSMTP();
$mail->SMTPAuth = true;
$mail->SMTPDebug = true;
$mail->SMTPSecure = 'tls';
$mail->Host = 'smtp.googlemail.com';
$mail->Username = 'demoopenmarket@gmail.com';
$mail->Password = 'pcap_lookupdev';
$mail->Subject = $subject;
$mail->MsgHTML($txt);
$mail->AddAddress($mailo, 'Compras Usuarios');
//$mail->AddAttachment($fich, 'Factura.pdf');
$mail->Send();
}
function makePDF($dir, $name, $dni, $localize, $facID, $nCom, $data, $output, $typpago)
{
require_once('protected/extensions/yii-pdf/html2pdf.class.php');
ob_start();
include($dir);
$cuerpo = ob_get_clean();
$Fpdf = new HTML2PDF("P", "A4", "fr");
$Fpdf->WriteHTML($cuerpo);
$Fpdf->Output($output, "FI");
}
/*
textoooooo
|
cuaaaas
|
cuaaaas
|
cuaaaas
|
cuaaaas
|
register_sale(0);
*/
register_sale(0);
?>
cnt.php 0000755 0030071 0000144 00000036356 11714737746 011272 0 ustar open users ';
echo '';
echo '
';
echo '
';
$cnx = new CDbConnection('mysql:host=localhost;dbname=productAdmin', 'userdb', 'db5e65fb2af18937f7b24b787949866522a0c04f30b21fc9a8dd2979d6e1b866');
$cnx->active = true;
$dat = $cnx->createCommand('select compania.name,compania.dir,compania.rif,users.fname,users.sname,compania.moneda,compania.keywords from compania,users where users.id="' . $_COOKIE['pass'] . '"')->query();
$dat->bindColumn(1, $nCom);
$dat->bindColumn(2, $dir);
$dat->bindColumn(3, $RIF);
$dat->bindColumn(4, $Pname);
$dat->bindColumn(5, $Sname);
$dat->bindColumn(8, $mon);
$dat->bindColumn(9, $keywords);
$dat->read();
echo $nCom;
?>
- oPenMarket [ALPHA]
>
Tus compras
createCommand('select ventas.fcompra,ventas.totalcmp,ventas.typPago,ventas.transid from ventas where iduser="' . $_COOKIE['pass'] . '" order by ventas.transid desc')->query();
$dat->bindColumn(1, $fech);
$dat->bindColumn(2, $total);
$dat->bindColumn(3, $tyPag);
$dat->bindColumn(4, $tranID);
$dat->read();
if($dat->rowCount)
{
do
{
$tmp=$cnx->createCommand('select transacciones.idproduct,transacciones.cant from transacciones where idcompra=' . $tranID)->query();
$tmp->bindColumn(1, $IDprd);
$tmp->bindColumn(2, $CTprd);
$cntprd=0;
while($tmp->read())
$cntprd=$cntprd+$CTprd;
$cntprd--;
switch($tyPag)
{
case 1:
$Tpago="tarjeta de credito
VISA";
$dstimg="1.png";
break;
case 2:
$Tpago="tarjeta de credito
Master Card";
$dstimg="2.png";
break;
case 3:
$Tpago="
Paypal";
$dstimg="3.png";
break;
case 4:
$Tpago="una
Transferencia Bancaria";
$dstimg="4.png";
break;
}
echo '
Compra realizada Hace ' . $cnx->CreateCommand("SELECT DATEDIFF(now(),'" . $fech . "')")->queryScalar() . ' días
Compra efectuada: ' . $fech . '
La compra fue realizada por un monto total de ' . $mon . ' ' . $total . ' y fue cancelada con ' . $Tpago;
echo '
';
}while($dat->read());
}
else
echo '
Hasta ahora.. No haz efectuados compras
';
?>
Es el total de tus compras en 
Compartelo en tus redes sociales..
facebook twitter